We'll need to talk about scopes & permissions, but let's leave that aside for a moment.